$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json) Hash identifier: CHxNJe5uo6jBVpgegDXENc3uwz2CvQDsv9Iq9YRaFpw= Subject key identifier: 66:98:4C:27:88:8F:51:DC:55:F0:22:8D:C0:F9:23:05:B2:DD:1A:E4 Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Certificate serial: 05F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft Manifest number: 05E5 Signing time: Mon 30 Jun 2025 23:19:44 +0000 Manifest this update: Mon 30 Jun 2025 23:19:44 +0000 Manifest next update: Mon 07 Jul 2025 23:19:44 +0000 Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: /QElhli/0RUqu/JDptsMAAsFXra52MDTEKAn47lLBY8=) 2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: 4+8EOl0IVC0WYPREjgU4SQ2gBQ7SWbeC1nS8R2xM7hU=) 3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: Jks+wAurz0A89wXrN9oPKVJZcdKUluPelZM2Gsz3YvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1521 (0x5f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Validity Not Before: Jun 30 23:19:44 2025 GMT Not After : Jul 7 23:19:44 2025 GMT Subject: CN=68631b90-137c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:a0:b7:15:f4:dd:04:9b:b7:9a:81:6a:97: c2:d4:55:c3:1c:b1:f9:56:e7:7e:4c:5f:d6:5d:20: e6:26:d6:d9:1a:77:25:6d:a3:8d:56:c1:69:03:9d: 5f:09:3f:3c:30:30:7a:85:9b:8c:26:07:35:e9:eb: 1c:79:88:87:ae:84:56:9a:25:e6:e0:01:19:aa:49: e0:d0:c5:31:76:58:f6:4b:d1:c4:f7:cb:d9:43:fa: 20:0d:95:f0:97:84:a4:64:b0:8e:a2:27:63:ab:de: ba:a9:4e:80:03:42:a4:c2:bd:e4:54:d2:cf:e1:1e: d8:90:34:08:b2:3d:47:0b:1c:70:06:df:20:ad:f2: a4:f9:3b:a4:82:e4:6a:18:08:ba:c6:7b:b7:8d:58: c7:87:68:5e:1f:08:90:08:a1:9f:72:92:06:b0:2f: e5:23:07:15:1d:6e:be:59:31:69:b1:c0:c3:43:66: 21:41:8f:93:2c:00:61:0f:23:09:44:d1:45:03:5d: 45:79:7e:d5:77:0a:9d:ba:75:21:1d:d9:77:18:96: 61:4a:07:1e:27:4e:1f:df:2c:ce:4f:88:54:e3:3d: 31:84:f9:1b:a5:91:df:c7:af:57:54:b6:81:7b:bb: 92:32:14:46:88:7f:ef:45:3a:8a:c2:86:f1:fd:1b: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:98:4C:27:88:8F:51:DC:55:F0:22:8D:C0:F9:23:05:B2:DD:1A:E4 X509v3 Authority Key Identifier: keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b7:fb:a1:4f:56:3e:76:62:81:e8:4d:0d:1c:37:d0:ea:26: f6:3f:38:59:58:bf:86:e3:dd:e7:19:c6:63:12:bb:e3:fc:dc: 87:0e:bb:67:7a:73:70:27:26:3c:59:cc:2e:18:79:ec:a4:16: 49:2e:ad:14:15:c0:f2:ef:de:1b:dd:fb:05:12:66:de:58:8e: 49:69:3e:1c:7e:1d:06:07:48:31:2c:b8:b4:5f:1f:8a:e6:4c: 58:e1:6b:b6:9d:19:07:93:92:48:d5:ad:36:8e:f7:88:17:05: 40:05:b7:7d:94:1e:fc:f5:92:35:a4:74:b8:5f:55:ff:92:39: 0b:79:2d:6c:fd:c0:c9:26:0c:9d:26:8e:5f:37:6a:9d:6a:ee: f6:7a:0c:e1:60:ed:20:fa:ea:13:b4:66:e8:80:eb:fd:f1:d8: ce:c7:88:97:85:e4:41:0a:5a:60:c2:ae:f2:1b:5c:04:20:b6: ed:75:e8:61:54:69:b1:b7:bf:e4:c1:eb:a5:83:1a:1c:0c:c5: 21:4d:f0:43:75:ee:d6:45:7f:7a:df:2f:6b:69:41:37:74:84: 83:59:c3:cc:39:67:7d:9f:9a:69:73:d8:3c:b3:19:3a:03:d4: 79:5a:37:70:a8:45:89:53:ed:b2:a7:ee:20:a6:82:5b:03:54: fc:c9:3d:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU2NEExMTAvBgNVBAUTKDA3QkJFQ0QwRUEwODlGQzY0RUUxNDBEREM4RERCQTUy RTdEOTEwRDAwHhcNMjUwNjMwMjMxOTQ0WhcNMjUwNzA3MjMxOTQ0WjAYMRYwFAYD VQQDEw02ODYzMWI5MC0xMzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuagtxX03QSbt5qBapfC1FXDHLH5Vud+TF/WXSDmJtbZGnclbaONVsFpA51f CT88MDB6hZuMJgc16esceYiHroRWmiXm4AEZqkng0MUxdlj2S9HE98vZQ/ogDZXw l4SkZLCOoidjq966qU6AA0Kkwr3kVNLP4R7YkDQIsj1HCxxwBt8grfKk+TukguRq GAi6xnu3jVjHh2heHwiQCKGfcpIGsC/lIwcVHW6+WTFpscDDQ2YhQY+TLABhDyMJ RNFFA11FeX7VdwqdunUhHdl3GJZhSgceJ04f3yzOT4hU4z0xhPkbpZHfx69XVLaB e7uSMhRGiH/vRTqKwobx/RuxlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaYTCeI j1HcVfAijcD5IwWy3RrkMB8GA1UdIwQYMBaAFAe77NDqCJ/GTuFA3cjdulLn2RDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTY0QS9DQ0NBNUY1RUJB QjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44Wk80VURkeU4yNlV1ZlpF TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3dnMwT29JbjhaTzRVRGR5TjI2VXVmWkVOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTY0QS9DQ0NBNUY1RUJBQjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44 Wk80VURkeU4yNlV1ZlpFTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPt/uhT1Y+dmKB6E0NHDfQ6ib2PzhZWL+G493nGcZjErvj/NyHDrtn enNwJyY8WcwuGHnspBZJLq0UFcDy794b3fsFEmbeWI5JaT4cfh0GB0gxLLi0Xx+K 5kxY4Wu2nRkHk5JI1a02jveIFwVABbd9lB789ZI1pHS4X1X/kjkLeS1s/cDJJgyd Jo5fN2qdau72egzhYO0g+uoTtGbogOv98djOx4iXheRBClpgwq7yG1wEILbtdehh VGmxt7/kweulgxocDMUhTfBDde7WRX963y9raUE3dISDWcPMOWd9n5ppc9g8sxk6 A9R5WjdwqEWJU+2yp+4gpoJbA1T8yT3S -----END CERTIFICATE-----Generated at Wed Jul 2 04:16:33 2025 by rpki-client